# How to find and fix Critical WebP zero-day vulnerability CVE-2023-4863

DevFeed: [How to find and fix Critical WebP zero-day vulnerability CVE-2023-4863](<https://devfeed.tech/articles/how-to-find-and-fix-critical-webp-zero-day-vulnerability-cve-2023-4863-7920.md>)

Original publisher: [Read original article](<https://snyk.io/blog/find-and-fix-webp-vulnerability-cve-2023-4863/>)

Author: Brian Clark; Eric Smalling; Tim Gowan

Published: 2023-10-05T18:00:00Z

Content type: article

Language: en

Sources: [Blog RSS Feed | Snyk](<https://devfeed.tech/sources/blog-rss-feed-snyk.md>)

Topics: [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [Chromium](<https://devfeed.tech/topics/chromium.md>), [browsers](<https://devfeed.tech/topics/browsers.md>), [Library](<https://devfeed.tech/topics/library.md>), [Security](<https://devfeed.tech/topics/security.md>), [snyk-container](<https://devfeed.tech/topics/snyk-container.md>), [snyk-open-source](<https://devfeed.tech/topics/snyk-open-source.md>), [Containers](<https://devfeed.tech/topics/containers.md>), [Google](<https://devfeed.tech/topics/google.md>), [Python](<https://devfeed.tech/topics/python.md>), [Swift](<https://devfeed.tech/topics/swift.md>)

Tags: [acquisition](<https://devfeed.tech/tags/acquisition.md>), [analysis](<https://devfeed.tech/tags/analysis.md>), [blog](<https://devfeed.tech/tags/blog.md>), [browsers](<https://devfeed.tech/tags/browsers.md>), [chromium](<https://devfeed.tech/tags/chromium.md>), [containers](<https://devfeed.tech/tags/containers.md>), [cve](<https://devfeed.tech/tags/cve.md>), [dependency](<https://devfeed.tech/tags/dependency.md>), [developer](<https://devfeed.tech/tags/developer.md>), [developers](<https://devfeed.tech/tags/developers.md>), [devrel](<https://devfeed.tech/tags/devrel.md>), [security](<https://devfeed.tech/tags/security.md>), [snyk](<https://devfeed.tech/tags/snyk.md>), [snyk-container](<https://devfeed.tech/tags/snyk-container.md>), [snyk-open-source](<https://devfeed.tech/tags/snyk-open-source.md>), [vulnerabilities](<https://devfeed.tech/tags/vulnerabilities.md>), [vulnerability](<https://devfeed.tech/tags/vulnerability.md>), [vulnerability-insights](<https://devfeed.tech/tags/vulnerability-insights.md>)

## AI overview

This article explains the critical WebP vulnerability CVE-2023-4863 and the related CVE-2023-5129. It describes how maliciously formed WebP images can exploit Chromium-based browsers and the Google-provided libwebp library, with impacts extending to operating systems, containers, and developer ecosystems. The article focuses on identifying libwebp usage and remediating affected dependencies.

## Source excerpt

Last month, two Critical WebP vulnerabilities (CVE-2023-4863 and CVE-2023-5129) were discovered. In this post, learn how to identify where you use libwebp and how to remediate the vulnerabilities.